openproject

Commit Graph

Author	SHA1	Message	Date
Henriette Dinger	bd7f4e4814	Update copyright notice	5 years ago
Oliver Günther	1b5fc32366	Avoid before blocks and raw params access for IDs Grape's validation runs after a `before` block so we should avoid using raw params there and instead using `declared(params)` which returns only the validated whitelisted params, much like a permitted params hash.	6 years ago
Oliver Günther	0791c55870	Remove the internal setting with 500 max entries Instead, use the maximum allowed page size for the maximum number. This will match what the users have selected and be reasonable without adding another user-visible setting. https://community.openproject.com/wp/30103	6 years ago
Henriette Dinger	f6f1901370	Allow reading access for not logged in users to show usernames and avatars in WPs	6 years ago
Jens Ulferts	e93e3731b2	place user delete service inside users namespace	6 years ago
Jens Ulferts	02cdabed65	prevent access to user api for locked admins	6 years ago
Oliver Günther	6ef4211e77	Bump copyright to 2018 (#6171 ) [ci skip]	7 years ago
Jens Ulferts	8842558aac	refactor for code quality	7 years ago
Wieland Lindenthal	4e22681e78	User mentions feature (#5897 ) * Extend syntax for linking users via their ID * Allow login names for linking user profiles. * User require_relative for legacy tests * Add specs for login name based user links; Fixes other specs, too. * Notify mentioned users * Notify linked users; - require quotes for login names in user links as login names can contain spaces, dots that are typical word boundaries - Adding specs * For the decision who gets notified due to mentions only the visibility permissions of the recipient are relevant. * Rubucop satisfaction * Add autocomplete for user names to work pack package descriptions and activity - Uses API V3 Principals endpoint. - Extends API endpoint with name filter and name order. - Make it activate when user types an "@" or a "user#" - Still for work packages only. * Directly show a list of users after typing '@' and allow navigating list with cursor keys * Add an '@' before the rendered user link * Adopting spec as WP autocompleter now expects whitespace before hash sign * Adding spec for using user autocompleter * Introduce magic pageSize of 0 for maximum length * Add id filter for principals * Allow pagination for principals and protect from falling back to a too low default value * Fixing specs * fixing typo in spec * Add magic number 0 for user custom fields * Add a toParams method for ApiV3FilterBuilder * User ApiV3FilterBuilder in path helper service * Add test for mentions principals to path helper * WIP * Convert auto complete helper to TS [ci skip]	7 years ago
Oliver Günther	fdfb41b327	[26069] Allow passing of me-value link for principal filters again The 'me' value is currently automatically normalized to the current user, making it impossible to store queries that reference the current user whenever accessing the query as before.	7 years ago
ulferts	9c8f7f3ca1	read operations for time_entries via api v3 (#5776 ) * read operations for time_entries via api v3 Introduces the endpoints: * GET /api/v3/time_entries * GET /api/v3/time_entries/:id * GET /api/v3/time_entries/activities/:id The index action for time entries can be queried by the following filters: * project_id * user_id * work_package_id The implementation is exposing the database structure mostly one to one with the exception of some renaming and the hiding of the activities' complexity, where only the activity used systemwide is referenced regardless of whether a project specific override exists or not. * allow custom values for time entries [ci skip]	7 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Jens Ulferts	a52c8ee07d	allow for filtering the queries in the API v3 Only implements the `project` filter for now which can be used to differntiate between queries from specific projects and can also be used to specify that the client is only interested in global queries	8 years ago
Oliver Günther	46db333060	Refactor as mixin	8 years ago
Oliver Günther	350de7c482	Allow users to be uniquely identified by login	8 years ago
Jens Ulferts	d4e71fd67e	add user query and enabled it in the users api	8 years ago
Jens Ulferts	1a597e180b	first step towards generalizing the query and its filters	8 years ago
Jens Ulferts	e53916aec6	support perPage and offset on users index	8 years ago
Jens Ulferts	040bb5ab54	add basic GET api/v3/users	8 years ago
Oliver Günther	6cbfc7ffed	[24063] Add Users PATCH endpoint	8 years ago
Oliver Günther	9dc8d09516	Add CreateUser API endpoint and spec	8 years ago
Alex Coles	a6212fb304	Fix syntax (w/Rubocop) in lib code Signed-off-by: Alex Coles <alex@alexbcoles.com>	9 years ago
Jan Sandbrink	b1ba33c75b	specify classes explicitly rather than implicitly This is a new try for the APIv3 classes, we either: - FULLY qualify a class and let the autoloader do the rest - don't qualify at all, but require the class explicitly Thus we do not (yet) completely give up on the rails autoloader, but we circumvent a fair amount of its magic (and problems). The hope is to eliminate the following problems in development mode: - NameErrors because the autoloader infers the wrong prefix - "object is not missing constant" errors occuring more rarely Let's see how that turns out to work...	10 years ago
Jan Sandbrink	f0863f9d53	allow to patch existing API endpoints	10 years ago
Jan Sandbrink	a72ea0d5af	more consequently use route_param this seems to be the GRAPE-iest way possible	10 years ago
Jan Sandbrink	2d821da157	prefix representers to help rails out some some reason it get random NameErrors in development mode otherwise... I don't know why nobody else is getting those, but I am getting them quite reliably when opening the work package view and then the work package details pane...	10 years ago
Jens Ulferts	374c1f0af9	prefer current_user over User.current	10 years ago
Oliver Günther	9e6da91798	Updated API for user (un-)locking - Adds an lockable?, activatable? to the Principal model, which is overridden by User as aliases to active? and locked?. - UserRepresenter refers to the above methods - Refactored /lock routes into a single method Specs: - Adds delete /users/:id/lock spec - Refactored FactoryGirl calls to avoid create where feasible	10 years ago
Oliver Günther	a112291396	apiv3: User (Un-)Locking functionality This commit implements the proposed user locking/unlocking functionality in https://github.com/opf/openproject/pull/2401. The APIv3 is extended with a resource ``/user/:id/lock`` with the following properties: * ``POST /lock``: Set the lock of user(:id), if its account status is 'active'. * ``DELETE /lock``: Remove an active lock of user(:id), if its account status is 'locked'. This commit also implements the following changes to ``UserRepresenter``: * Replaced the integer status field with the textual status name (i.e., 'active') * Added two entries to _links for admin users: ``lock``, ``unlock``.	10 years ago
Alex Coles	e0191e759c	Update year in copyright header to 2015 [ci skip]	10 years ago
Markus Kahl	a33c8fa312	API v3 delete user	10 years ago
Hagen Schink	db8bfba3af	Remove usage of reform from API V3	10 years ago
Alex Coles	45297523c2	Fix syntax (w/Rubocop) in lib code Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	92e8384266	Add missing Copyright headers in lib (API) code [ci skip] Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	baf328c798	Minor refactoring of UsersAPI Remove unnecessary ivars, absolute namespacing. Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	0bf314f149	Specify a custom Formatter for hal+json This avoids having to explicitly call #to_json: https://github.com/intridea/grape#api-formats Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Marek Takac	088525fbbd	Got rid of authorization for show user API endpoint	10 years ago
Marek Takac	583a7d6b5f	Added API show user endpoint Conflicts: lib/api/v3/root.rb	10 years ago

40 Commits (1fbc75b96d93b7574b63fa9d8772d13efaf0fb14)